Date: Mon, 22 Aug 2005 07:06:37 GMT From: Alexandr Sulzhenko <sulya@ukr.net> To: freebsd-gnats-submit@FreeBSD.org Subject: kern/85202: lock order reversal Message-ID: <200508220706.j7M76bio053975@www.freebsd.org> Resent-Message-ID: <200508220710.j7M7A91b006528@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 85202
>Category: kern
>Synopsis: lock order reversal
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Mon Aug 22 07:10:09 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator: Alexandr Sulzhenko
>Release:
>Organization:
Ukr.net
>Environment:
FreeBSD heaven.ukr.net 6.0-BETA2 FreeBSD 6.0-BETA2 #0: Wed Aug 3 08:22:24 UTC 2005 root@harlow.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386
>Description:
taskqueue_drain with the following non-sleepable locks held:
exclusive sleep mutex xl0 (network driver) r = 0 (0xc16680a4) locked @ /usr/src/sys/pci/if_xl.c:2796
KDB: stack backtrace:
kdb_backtrace(1,c16680c8,c1666000,c1554e00,d0aa1b04) at kdb_backtrace+0x29
witness_warn(5,0,c08593f6,c1666000,c1666000) at witness_warn+0x18e
taskqueue_drain(c1554e00,c16680c8,c16680a4,1,c086c796,cc7) at taskqueue_drain+0x1a
xl_stop(c1666000,c16680a4,1,c086c796,af9) at xl_stop+0x44
xl_init_locked(c1666000,c16680a4,0,c086c796,aec) at xl_init_locked+0x33
xl_init(c1666000,8020690c,c172b600,c1666000,d0aa1bc0) at xl_init+0x26
ether_ioctl(c1657800,8020690c,c172b600,0,c172b600) at ether_ioctl+0x50
xl_ioctl(c1657800,8020690c,c172b600,1,d42a4356) at xl_ioctl+0x2be
in_ifinit(c1657800,c172b600,c16b9850,0,d0aa1c38) at in_ifinit+0x206
in_control(c17b9de8,8040691a,c16b9840,c1657800,c16a5d80) at in_control+0x882
ifioctl(c17b9de8,8040691a,c16b9840,c16a5d80,0) at ifioctl+0x198
soo_ioctl(c1755828,8040691a,c16b9840,c1553a80,c16a5d80) at soo_ioctl+0x2db
ioctl(c16a5d80,d0aa1d04,3,3,286) at ioctl+0x370
syscall(3b,3b,3b,8056a20,8058d00) at syscall+0x22f
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (54, FreeBSD ELF32, ioctl), eip = 0x280c6287, esp = 0xbfbfe5ec, ebp = 0xbfbfee38 ---
taskqueue_drain with the following non-sleepable locks held:
exclusive sleep mutex xl0 (network driver) r = 0 (0xc16680a4) locked @ /usr/src/sys/pci/if_xl.c:2796
KDB: stack backtrace:
kdb_backtrace(1,c16680c8,c1666000,c1554e00,d0aa1984) at kdb_backtrace+0x29
witness_warn(5,0,c08593f6,c1666000,c1666000) at witness_warn+0x18e
taskqueue_drain(c1554e00,c16680c8,c16680a4,1,c086c796,cc7) at taskqueue_drain+0x1a
xl_stop(c1666000,c16680a4,1,c086c796,af9) at xl_stop+0x44
xl_init_locked(c1666000,c16680a4,0,c086c796,aec) at xl_init_locked+0x33
xl_init(c1666000) at xl_init+0x26
ether_ioctl(c1657800,8020690c,c1741a00,0,1) at ether_ioctl+0x64
xl_ioctl(c1657800,8020690c,c1741a00,0,c1741a00) at xl_ioctl+0x2be
in6_ifinit(c1657800,c1741a00,d0aa1b9c,1,40) at in6_ifinit+0x90
in6_update_ifa(c1657800,d0aa1b8c,0) at in6_update_ifa+0x456
in6_ifattach_linklocal(c1657800,0) at in6_ifattach_linklocal+0xe5
in6_ifattach(c1657800,0,8040691a,8040691a,0) at in6_ifattach+0xb9
in6_if_up(c1657800) at in6_if_up+0x13
ifioctl(c17b9de8,8040691a,c16b9840,c16a5d80,0) at ifioctl+0x1f8
soo_ioctl(c1755828,8040691a,c16b9840,c1553a80,c16a5d80) at soo_ioctl+0x2db
ioctl(c16a5d80,d0aa1d04,3,3,286) at ioctl+0x370
syscall(3b,3b,3b,8056a20,8058d00) at syscall+0x22f
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (54, FreeBSD ELF32, ioctl), eip = 0x280c6287, esp = 0xbfbfe5ec, ebp = 0xbfbfee38 ---
lock order reversal
1st 0xc097b240 UMA lock (UMA lock) @ /usr/src/sys/vm/uma_core.c:1494
2nd 0xc1060144 system map (system map) @ /usr/src/sys/vm/vm_kern.c:295
KDB: stack backtrace:
kdb_backtrace(0,ffffffff,c0930358,c0930498,c08bace4) at kdb_backtrace+0x29
witness_checkorder(c1060144,9,c087130e,127) at witness_checkorder+0x564
_mtx_lock_flags(c1060144,0,c087130e,127) at _mtx_lock_flags+0x5b
_vm_map_lock(c10600c0,c087130e,127) at _vm_map_lock+0x26
kmem_malloc(c10600c0,1000,1,cc9edba4,c077e865) at kmem_malloc+0x32
page_alloc(c104a5a0,1000,cc9edb97,1,c0653450) at page_alloc+0x1a
slab_zalloc(c104a5a0,1,1,c170d5c0,c1049214) at slab_zalloc+0xa1
uma_zone_slab(c104a5a0,1,1,c,31fb) at uma_zone_slab+0xe8
uma_zalloc_bucket(c104a5a0,1) at uma_zalloc_bucket+0x12c
uma_zalloc_arg(c104a5a0,0,1) at uma_zalloc_arg+0x2dc
malloc(200,c08f5480,1,83,c1044460) at malloc+0xae
hash_alloc(cc9edc74,c1044468,0,c08705c7,1ab) at hash_alloc+0x29
zone_timeout(c1042b40) at zone_timeout+0x7e
zone_foreach(c077e09c,cc9edce8,c063d25f,0,c077e068) at zone_foreach+0x37
uma_timeout(0) at uma_timeout+0x12
softclock(0) at softclock+0x1e7
ithread_loop(c157a980,cc9edd38,c157a980,c061f854,0) at ithread_loop+0x11c
fork_exit(c061f854,c157a980,cc9edd38) at fork_exit+0xa0
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xcc9edd6c, ebp = 0 ---
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200508220706.j7M76bio053975>